CVE-2020-14213: Zammad

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

In Zammad before 3.3.1, a Customer has ticket access that should only be available to an Agent (e.g., read internal data, split, or merge).

Affected products

• Zammad Zammad: before 3.3.1 (fixed in 3.3.1)

Published 2020-06-16. Last modified 2026-06-17.